xrpl.js vulnerabilities

1 known vulnerability in xrpl.js from XRPLF. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  xrpl.js: Embedded Malicious Code

  CVE-2025-32965Apr 22, 2025XRPLF

  xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. Versions 4.2.1, 4.2.2, 4.2.3, and 4.2.4 of xrpl.js were compromised and contained malicious code designed to exfiltrate private keys. Version 2.14.2 is also